Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37342e302f32342d3234203d3e20323731323935.roa
File:                     3139302e35322e37342e302f32342d3234203d3e20323731323935.roa (raw, json)
Hash identifier:          C9zLizMdhKEBAZlxQ/HrZZd6rtli7XBM9VRCl7I24V0=
Subject key identifier:   D8:83:68:0F:B3:BD:D6:2F:72:9D:85:E4:5C:5D:12:C1:0D:D1:48:EC
Certificate issuer:       /CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
Certificate serial:       58003BA17278B0AFDDFB1BD344B5B215045CD3C8
Authority key identifier: 4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37342e302f32342d3234203d3e20323731323935.roa
Signing time:             Fri 31 Mar 2023 16:45:06 +0000
ROA not before:           Fri 31 Mar 2023 16:40:06 +0000
ROA not after:            Fri 29 Mar 2024 16:45:06 +0000
asID:                     271295
IP address blocks:        190.52.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:00:3b:a1:72:78:b0:af:dd:fb:1b:d3:44:b5:b2:15:04:5c:d3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF
        Validity
            Not Before: Mar 31 16:40:06 2023 GMT
            Not After : Mar 29 16:45:06 2024 GMT
        Subject: CN=D883680FB3BDD62F729D85E45C5D12C10DD148EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:90:3b:08:09:bd:d5:d2:ba:93:41:b7:fb:
                    1e:71:96:0a:37:f9:d8:d3:4d:99:7f:cc:6b:71:b8:
                    f0:49:45:b7:26:8a:44:75:ac:42:5e:ac:e7:2e:37:
                    93:de:a4:af:d0:48:a1:5b:c9:14:a7:40:0e:64:db:
                    db:30:8e:93:8b:88:2f:ff:5d:60:31:2d:f1:b3:bd:
                    eb:3c:21:fd:df:da:92:7b:8a:21:bf:b6:a5:02:14:
                    53:d7:38:f8:37:38:9c:09:21:9f:bb:57:b6:96:6f:
                    85:9c:e5:68:58:a4:78:1b:0e:26:ec:ff:aa:18:f4:
                    d5:ae:27:4d:6d:cd:6f:91:f7:f4:98:c4:5e:68:a0:
                    0c:93:65:bc:6c:cf:0b:88:80:fe:cd:fa:70:c4:5b:
                    da:fb:ad:5f:9f:bd:85:d9:4a:fc:b4:36:fa:e5:35:
                    8a:49:82:f4:b5:5f:f9:b9:4b:02:9c:94:70:cc:56:
                    37:c0:fa:7b:f5:36:fe:0f:a3:d9:51:b3:1a:01:b2:
                    8c:1d:d7:3a:f4:5b:34:4f:13:6a:88:57:02:b5:7c:
                    29:d0:aa:98:a4:21:e1:f0:cb:fe:07:89:0f:28:9e:
                    50:3c:58:06:d8:08:8e:8f:71:2f:65:b8:6f:58:d1:
                    ae:5b:87:02:01:ed:35:bb:db:aa:ae:98:4c:fe:82:
                    d8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:83:68:0F:B3:BD:D6:2F:72:9D:85:E4:5C:5D:12:C1:0D:D1:48:EC
            X509v3 Authority Key Identifier:
                keyid:4C:DD:B0:C2:29:BC:D8:3E:F9:BF:28:32:1F:0A:D9:66:E0:19:B5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CDDB0C229BCD83EF9BF28321F0AD966E019B5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/3139302e35322e37342e302f32342d3234203d3e20323731323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.52.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:a5:e1:0b:05:8a:87:74:16:9c:e7:90:f1:a0:e8:f9:80:ab:
         6b:3b:33:77:90:20:81:cf:18:b6:8e:10:0f:56:fd:67:24:7b:
         66:4f:3b:7c:2e:15:ce:db:f6:86:49:69:67:03:57:28:21:1a:
         56:cf:22:ec:f1:18:c7:07:b5:62:a8:f0:88:ed:42:8c:47:b0:
         1f:10:2e:ce:b2:fb:b2:c7:c1:21:39:25:9c:c4:37:0a:73:ef:
         9f:f9:96:be:67:90:d1:0a:9b:aa:13:ff:f8:33:6a:f3:37:d1:
         b0:d1:5c:3f:b1:62:29:08:4f:27:38:aa:f9:05:83:6f:37:76:
         42:18:84:f6:6f:68:00:00:f9:16:e3:9c:a1:ba:61:c4:4a:45:
         4c:b8:ea:9f:e3:8b:cb:0d:e6:9b:b9:7f:98:41:33:5e:4a:a0:
         7a:59:b1:df:cc:c2:d6:d3:03:88:da:0a:2f:c2:b0:f5:e9:51:
         d0:06:86:e1:02:78:a0:6a:0f:0c:6b:5a:25:d3:14:1b:98:49:
         99:08:7a:7b:3d:e0:45:29:c8:ff:0f:ed:06:14:b6:47:85:47:
         62:7d:43:fd:1e:59:a1:22:5b:2c:17:a9:7f:b7:47:ad:28:70:
         10:89:ae:67:48:f9:70:92:f2:50:e1:13:1f:1e:2a:ba:e6:cf:
         57:a7:aa:ff
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWAA7oXJ4sK/d+xvTRLWyFQRc08gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENEREIwQzIyOUJDRDgzRUY5QkYyODMyMUYwQUQ5NjZF
MDE5QjVBRjAeFw0yMzAzMzExNjQwMDZaFw0yNDAzMjkxNjQ1MDZaMDMxMTAvBgNV
BAMTKEQ4ODM2ODBGQjNCREQ2MkY3MjlEODVFNDVDNUQxMkMxMEREMTQ4RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIS5A7CAm91dK6k0G3+x5xlgo3
+djTTZl/zGtxuPBJRbcmikR1rEJerOcuN5PepK/QSKFbyRSnQA5k29swjpOLiC//
XWAxLfGzves8If3f2pJ7iiG/tqUCFFPXOPg3OJwJIZ+7V7aWb4Wc5WhYpHgbDibs
/6oY9NWuJ01tzW+R9/SYxF5ooAyTZbxszwuIgP7N+nDEW9r7rV+fvYXZSvy0Nvrl
NYpJgvS1X/m5SwKclHDMVjfA+nv1Nv4Po9lRsxoBsowd1zr0WzRPE2qIVwK1fCnQ
qpikIeHwy/4HiQ8onlA8WAbYCI6PcS9luG9Y0a5bhwIB7TW726qumEz+gtipAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2INoD7O91i9ynYXkXF0SwQ3RSOwwHwYDVR0j
BBgwFoAUTN2wwim82D75vygyHwrZZuAZta8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNURTdHczSmlZTW84UW5EQWNaWkU1VWhnQ1pQNWRTdVN4UUdKdHg3cUZ6
Z2QvMC80Q0REQjBDMjI5QkNEODNFRjlCRjI4MzIxRjBBRDk2NkUwMTlCNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDRERCMEMyMjlCQ0Q4M0VG
OUJGMjgzMjFGMEFEOTY2RTAxOUI1QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVEU3R3M0ppWU1vOFFuREFjWlpFNVVoZ0NaUDVkU3VTeFFHSnR4N3FGemdkLzAv
MzEzOTMwMmUzNTMyMmUzNzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMx
MzIzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAvjRKMA0GCSqGSIb3DQEBCwUAA4IBAQBcpeELBYqH
dBac55DxoOj5gKtrOzN3kCCBzxi2jhAPVv1nJHtmTzt8LhXO2/aGSWlnA1coIRpW
zyLs8RjHB7ViqPCI7UKMR7AfEC7Osvuyx8EhOSWcxDcKc++f+Za+Z5DRCpuqE//4
M2rzN9Gw0Vw/sWIpCE8nOKr5BYNvN3ZCGIT2b2gAAPkW45yhumHESkVMuOqf44vL
DeabuX+YQTNeSqB6WbHfzMLW0wOI2govwrD16VHQBobhAnigag8Ma1ol0xQbmEmZ
CHp7PeBFKcj/D+0GFLZHhUdifUP9HlmhIlssF6l/t0etKHAQia5nSPlwkvJQ4RMf
Hiq65s9Xp6r/
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:38 2024 by rpki-client on console-fra.rpki-client.org